1password-environments
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill is authored by 1Password and provides a secure method for agents to interact with 1Password Developer Environments through the official
1password-mcpserver. - [EXTERNAL_DOWNLOADS]: The skill refers to official 1Password resources, including the
1password-mcptool and the1Password/1password-codex-pluginrepository on GitHub, for its setup and operation. - [COMMAND_EXECUTION]: The instructions involve configuring and running the
1password-mcplocal command. This execution is part of the primary, intended functionality of the skill to bridge the AI agent with the local 1Password environment. - [CREDENTIALS_UNSAFE]: The skill implements robust security instructions to prevent secret exposure. It explicitly directs the agent to only return variable names (never values), avoid logging secrets, and refrain from reading mounted
.envfiles, ensuring sensitive data remains protected within the 1Password vault.
Audit Metadata